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T JSTTNC; OF THE CT ATMS 

This listing of claims will replace all prim* versions, and listings, of claims in the 
application. Claims 1 - 12 are in the case. 

1 . (Original) A so 111 ware virus detection method, comprising the steps of: 

- interpreting code; 

- writing the results of said interpretation; 

- scanning the results of said interpretation for the presence of prnscrihed code. 

2. (Original) A method as in claim 1 wherein the step of scanning further comprising a 
tirst scanning step for the presence of code uf interest 

3. (Original) A method as in claim 2 wherein the first scanning step for the presence of 
code of interest further comprises scanning for a Hie open command or a file modify 
command. 

4. (Original) A method as in claim 2 wherein the step of scanning turther comprising a 
second scanning step for the presence of proscrihed code of interest. 

5. (Original) A method as in claim 4 wherein the second scanning step for the presence 
of proscrihed code of interest further comprises scanning for viral code or viral patterns. 

6. (Original) A software virus detection article of manufacture comprising: 

2 



PAGE 6/17 « RCVD AT 3J23/2Q05 5:01:20 PM [Eastern Standard rune] 1 SVR:USPT0€FXRF-1J3 1 DWS:8729306 1 CSK): ' DURATION (mm-ss):0W8 



Fi: Joseph Chovanes To:USPT0 (17038729396) 



17:02 03/23/05 EST Pg 7- 



- a computer readable medium; and, 

- a table of interpreted results, comprising interpreted proscribed code. 

7. (Original) A software virus detection apparatus, comprising: 

- a code interpreter; 

- a pattern analyzer; 

- a results evaluatm" 

- a reporter- 

whereby, after proscribed code is interpreted by said interpreter and results 
generated, those results are reviewed by said pattern analyzer for the presence of 
proscribed code, and results reported to said results cvaluatur. and from said results 
evaluator to a reporter. 

X. (Original) An apparatus as in claim 7 wherein said code interpreter further reviews 
said code for the presence of code of interest. 

9. (Original) An apparatus as in claim. 8 wherein said code interpreter further reviews 
said code for the presence of a file open command or a file modify command. 

10. (Original) Ah apparatus as in claim 9 wherein said pattern analyzer further reviews 
said code for the presence of code of interest. 

11. (Original) An apparatus as in claim 10 wherein said pattern analyzer turther reviews 
said code for the presence of proscribed code. 
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12. (Original) An apparatus as in claim 1 i wherein said pattern analyzer further reviews 
said code for Hie presence of viral code or viral patterns. 
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